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"5438622" 
"5245658" 

(("5438622") or ("5245658") or ("6324287")).PN. 
(("6038551") or ("6502193") or ("6668322")).PN. 
((("5113499") or ("5276735") or ("5499297") or 
("5502766") or ("5708780") or ( n 5805820 n ) or ("5875395") 
or ("5918018") or ("5943394") or ("5950195") or 
("5951694") or ("6035016") or ("6081900") or ("6098172") 
or ("6151686") or ("6182226")).PN.) and (alarm$3 or 
signai$4 or switch$3 or alert$3 or notif$7) with (intruder or 
malicious or attacker or illegal or illicit) with (detect$3 or 
notic$3 or observ$3 or indicat$3) 
((("5113499") or ("5276735") or ("5499297") or 
("5502766") or ("5708780") or ("5805820") or ("5875395") 
or ("5918018") or ("5943394") or ("5950195") or 
("5951694") or ("6035016") or ("6081900") or ("6098172") 
or ("6151686") or ("6182226")).PN.) and (alarm$3 or 
signal$4 or switch$3 or alert$3 or notif$7) with (intruder or 
malicious or attacker or illegal or illicit) with (detect$3 or 
notic$3 or observ$3 or indicat$3) and ((redirect$3) with 
(intruder or attacker or connection)) 
((("5113499") or ("5276735") or ("5499297") or 
("5502766") or ("5708780") or ("5805820") or ("5875395") 
or ("5918018") or ("5943394") or ("5950195") or 
("5951694") or ("6035016") or ("6081900") or ("6098172") 
or ("6151686") or ("6182226")).PN.) and (aiarm$3 or 
signal$4 or switch$3 or alert$3 or notif$7) with (intruder or 
malicious or attacker or illegal or illicit) with (detect$3 or 
notic$3 or observ$3 or indicat$3) and decoy 
713/200.ccls. 
713/200.ccls. 

713/201. eels. 

713/200.ccls. and (monitor$3 with (intruder or attacker)) 

713/201. eels, and (monitor$3 with (intruder or attacker)) 

713/201.ccls. and (monitor$3 with (intruder or attacker)) 

and (redirect$3 with connection) 

713/201.ccls. and (monitor$3 with (intruder or attacker)) 

and (redirect$3 or decoy) and @ad<20010313 

713/200.ccls. and (monitor$3 with (intruder or attacker)) 

and (redirect$4 or decoy) and @ad<20010313 

(redirect$3 with (intruder or attacker)) with connection 

same network and @ad<20010313 

(redirect$3 with (intruder or attacker)) with connection and 

@ad<20010313 

firewall and (redirect$3 with (intruder or attacker) with 
decoy) and @ad<20010313 

(intrusion adj detection) and (redirect$3 with (intruder or 

attacker) with decoy) and @ad<20010313 

(intrusion adj detection) and (redirect$3 with (intruder or 

attacker or connection)) and @ad<20010313 

(intrusion adj detection) and (redirect$3 with (intruder or 

attacker or connection)) and ((tim$3 or speed$l or quick) 

with (connection or transfer$4 or chang$3)) and 

@ad<20010313 

(intrusion adj detection) and (redirect$3 with (intruder or 
attacker or connection)) and ((time$3 or speed$l or quick) 
with (connection) with (transfer$4 or chang$3)) and 
@ad<20010313 



Search History 8/23/04 11:44:14 AM Page 1 



DB 



USPAT 
USPAT 
USPAT 
USPAT 
USPAT 



USPAT 



USPAT 



USPAT 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 

USPAT; 

US-PGPUB 



USPAT; 
US-PGPUB 



Time stamp 



2004/08/23 10:51 
2004/08/23 10:51 
2004/08/23 10:53 
2004/08/23 10:54 
2004/08/20 20:05 



2004/08/20 20:07 



2004/08/20 20:07 



2004/08/20 20:16 
2004/08/20 20:16 

2004/08/20 20:16 

2004/08/20 20:18 

2004/08/20 20:17 

2004/08/20 20:18 

2004/08/20 20:19 

2004/08/20 20:21 

2004/08/20 20:22 

2004/08/20 20:22 

2004/08/20 20:23 

2004/08/20 20:23 

2004/08/20 21:08 

2004/08/20 21:12 

2004/08/20 21:13 



C:\APPS\EAST\Workspaces\09808102.wsp 





0 


(intrusion adj detection) and (redirect$3 with (intruder or 
attacker or connection)) and ((time$3 or speed$l or quick) 
with (connection) with (redirect$4 or transfer$4 or 
chang$3)) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:13 


- 


22 


(intrusion adj detection) and ((time$3 or speed$l or quick) 
with (connection or audit$3) with (redirect$4 or transfer$4 
or chang$3)) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/21 00:14 


- 


13 


(intrusion adj detection) and ((time$3 or speed$l or quick) 
with (connection) with (redirect$4 or transfer$4 or 
chang$3)) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:17 


- 


0 


713/201.ccls. and (intrusion adj detection) and ((time$3) 
with (redirect$4 or transfer$4 or chang$3)) with connect$4 
with (less or greater) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:19 


- 


0 


713/201. eels, and (intrusion adj detection) and ((time$3) 
with (redirect$4 or transfer$4 or chang$3)) with (less or 
greater) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:19 


- 


0 


713/201. eels, and (intrusion adj detection) and ((time$3) 
with (redirect$4 or transfer$4 or chang$3)) with (less or 
greater or equal) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:19 


- 


1 


713/201. eels, and (duration) with (redirect$4 or transfer$4 
or chang$3) with (less or greater or equal) and 
@ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:20 


- 


611 


network and (duration) with (redirect$4 or transfer$4 or 
chang$3) with (less or greater or equal) and 
@ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:21 




0 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and (duration) with (redirect$4 or transfer$4 or 
chang$3) with (request or access or connection) with (less 
or greater or equal) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:23 




11 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and (duration) with (redirect$4 or transfer$4 or 
chang$3) with (request or access or connection) and 
@ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:31 


- 


0 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and (redirect$4) with (undetectable or 
unnoticeable) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:32 


- 


6 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and firewall and (redirect$4) with (detect$3 or 
notic$3) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:35 




1 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and firewall and (decoy or (threat adj3 deflect$4) 
or dummy or audit$3) with (detect$3 or notic$3 or 
perceiv$3 or alert$3) with (administrator) and 
@ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:38 


- 


47 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and firewall and (redirect$4 or audit$3) with 
(detect$3 or notic$3) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 21:56 


- 


9 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and firewall and (decoy or honeypot) and 
@ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 22:26 




16 


(("5113499") or ("5276735") or ("5499297") or ("5502766") 
or ("5708780") or ("5805820") or ("5875395") or 
("5918018") or ("5943394") or ("5950195") or ("5951694") 
or ("6035016") or ("6081900") or ("6098172") or 
("6151686") or ("6182226")).PN. 


USPAT 


2004/08/20 22:19 




0 


((("5113499") or ("5276735") or ("5499297") or 
("5502766") or ("5708780") or ("5805820") or ("5875395") 
or ("5918018") or ("5943394") or ("5950195") or 
("5951694") or ("6035016") or ("6081900") or ("6098172") 
or ("6151686") or ("6182226")).PN.) and decoy 


USPAT; 
US-PGPUB 


2004/08/20 21:59 
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0 


((("5113499") or ("5276735") or ("5499297") or 
("5502766") or ("5708780") or ("5805820") or ("5875395") 
or ("5918018") or ("5943394") or ("5950195") or 
("5951694") or ("6035016") or ("6081900") or ("6098172") 
or ("6151686") or ("6182226")).PN.) and honeypot 


USPAT; 
US-PGPUB 


2004/08/20 22:00 




16 


((("5113499") or ("5276735") or ("5499297") or 
("5502766") or ("5708780") or ("5805820") or ("5875395") 
or ("5918018") or ("5943394") or ("5950195") or 
("5951694") or ("6035016") or ("6081900") or ("6098172") 
or ("6151686") or ("6182226")).PN.) and (tim$3 or duration) 


USPAT; 
US-PGPUB 


2004/08/20 22:19 


- 


9 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and firewall and (decoy or honeypot) and time 
and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 22:26 




0 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and firewall and (decoy or honeypot) and ((time 
or duration or instance) with redirect$4) and 
@ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 22:27 




3 


network and (intru$4 or attacker or (malicious adj (access or 
request))) and firewall and (decoy or honeypot) and ((time 
or duration or instance) with direct$4) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 23:23 


- 


0 


("fredadjcohen.in.").PN. 


USPAT; 
US-PGPUB 


2004/08/20 23:23 


- 


1 


fred adj cohen.in. 


USPAT; 


2004/08/20 23:23 








US-PGPUB 


- 


5933 


cohen.in. 


USPAT; 
US-PGPUB 


2004/08/20 23:23 


- 


12 


cohen.in. and intrusion adj detection 


USPAT; 
US-PGPUB 


2004/08/20 23:24 


- 


0 


cohen.in. and intrusion adj detection and redirect$4 adj4 
tim$3 


USPAT; 
US-PGPUB 


2004/08/20 23:24 


- 


3 


cohen.in. and intrusion adj detection and redirect$4 


USPAT; 
US-PGPUB 


2004/08/20 23:26 


- 


9 


cohen.in. and redirect$4 with (tim$3 or duration) 


USPAT; 
US-PGPUB 


2004/08/20 23:29 


- 


1 




USPAT 


2004/08/20 23:28 




1 




USPAT 


2004/08/20 23:29 


- 


0 


redirect$4 with (tim$3 or duration) and intrustion adj 
detection 


USPAT; 
US-PGPUB 


2004/08/20 23:30 


- 


2 


redirect$4 with (tim$3 or duration) and honeypot 


USPAT; 
US-PGPUB 


2004/08/20 23:31 


- 


28036 


web adj server with redirection adj time with "100" 
nanosecond 


USPAT; 
US-PGPUB 


2004/08/20 23:40 


- 


0 


(web adj server) with (redirection adj time) with "100" adj 
nanosecond 


USPAT; 
US-PGPUB 


2004/08/20 23:41 




0 


(web adj server) with (redirection adj time) same 
(nanosecond or millisecond) 


USPAT; 
US-PGPUB 


2004/08/20 23:41 


- 


0 


(web adj server) with (redirection adj time) with 
breakthrough 


USPAT; 
US-PGPUB 


2004/08/20 23:41 


- 


0 


(web adj server) with (redirection adj time) with fast 


USPAT; 
US-PGPUB 


2004/08/20 23:42 


- 


0 


(server) with (redirection adj time) with breakthrough 


USPAT; 
US-PGPUB 


2004/08/20 23:42 


- 


0 


(server) with (redirection adj time) with little 


USPAT; 
US-PGPUB 


2004/08/20 23:42 


- 


0 


(server) with (redirection adj time) with negligble 


USPAT; 
US-PGPUB 


2004/08/20 23:42 




0 


(server) with (redirection adj time) with negligible 


USPAT; 
US-PGPUB 


2004/08/20 23:42 




10 


(server) with (redirection adj time) 


USPAT; 
US-PGPUB 


2004/08/20 23:42 




1 


(server) with (redirection adj time) and @ad<20010313 


USPAT; 
US-PGPUB 


2004/08/20 23:45 
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(server) with (redirection adj3 tim$3) and @ad<20010313 


USPAT; 


2004/08/20 23:48 








US-PGPUB 




- 


0 


(user) with (redirection adj3 tim$3) with server with 


USPAT; 


2004/08/20 23:48 






nanosecond and @ad<20010313 


US-PGPUB 




- 


0 


(user) with (redirection with tim$3) with server with 


USPAT; 


2004/08/20 23:48 






nanosecond and @ad<20010313 


US-PGPUB 




- 


0 


server with redirection with (tim$3 or duration) with 


USPAT; 


2004/08/20 23:49 






nanosecond and @ad<20010313 


US-PGPUB 


- 


1 


server with redirection with (tim$3 or duration) with ns and 


USPAT; 


2004/08/20 23:50 






@ad<20010313 


US-PGPUB 




- 


0 


server with redirection with (tim$3 or duration) with ms and 


USPAT; 


2004/08/20 23:51 






@ad<20010313 


US-PGPUB 


- 


0 


server with redirection with (tim$3 or duration) with 


USPAT; 


2004/08/20 23:51 






millisecond and @ad<20010313 


US-PGPUB 


- 


2 


server with redirection with (tim$3 or duration) and 


USPAT; 


2004/08/20 23:53 






millisecond and @ad<20010313 


US-PGPUB 


- 


0 


server with redirection with (tim$3 or duration) and 


USPAT; 


2004/08/20 23:53 






microsec and @ad<20010313 


US-PGPUB 


- 


16 


((("5113499") or ("5276735") or ("5499297") or 


USPAT; 


2004/08/21 00:15 






("5502766") or ("5708780") or ("5805820") or ("5875395") 


US-PGPUB 






or ("5918018") or ("5943394") or ("5950195") or 










("5951694") or ("6035016") or ("6081900") or ("6098172") 










or ("6151686") or ("6182226")).PN.) and tim$3 








17 


713/201. eels, and (monitor$3 with (intruder or attacker)) 


USPAT; 


2004/08/21 00:16 






and (redirect$3 or decoy) 


US-PGPUB 




11 


713/200.ccls. and (monitor$3 with (intruder or attacker)) 


USPAT; 


2004/08/21 00:16 






and (redirect$4 or decoy) 


US-PGPUB 
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